Package Health

aura/framework

The Aura Framework package, when combined with a system skeleton, provides a full-stack framework built from Aura components.

Latest 1.0.1PackagistPackagist

34%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Dependencies
Dependencies
Evaluates the health and security of package dependencies

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

75

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Release historydanger

The latest release was published in March 2015, with no releases in the last 12 months; this indicates prolonged abandonment despite seven historical releases.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, corroborating the stale registry release history rather than providing compensating maintenance evidence.

Dependency profilecaution

The package declares 17 runtime dependencies and no development dependencies, reflecting a broad framework composition that increases the maintenance surface of an already inactive release.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tools were detected. The missing scanning is a modest hygiene gap, not the main adoption concern.

Security policycaution

The linked repository has no security policy. This weakens vulnerability-reporting transparency, although it is secondary to the much stronger abandonment evidence.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Paul M. Jones
Hari KT
Aura.Framework Contributors
Pascal Borreli
Nakymaton
Galactic Void
Branden Cash

Direct Dependencies

DependencyLast ReleaseScore
aura/di
Version ~1.0
—
—
aura/cli
Version ~1.0
—
—
aura/sql
Version ~1.0
—
—
aura/uri
Version ~1.0
—
—
aura/web
Version ~1.0
—
—

Weekly Downloads

Info

Last Published
11 years ago
Created
14 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform